Privacy Policy

This policy explains how Evocation (Collation Ltd, 48 Acomb Crescent, Newcastle upon Tyne NE3 2BA, UK) handles your personal data under UK GDPR. We are the data controller. Questions: contact@evocation.store.

What we collect

• Account: email address and a hashed password (handled by our authentication provider, Supabase).
• Profile: optionally your name, phone number and shipping address, if you choose to save them.
• Orders: items, amount, billing/shipping address and contact details, processed by our payment provider, Stripe.
• Requests: the part and vehicle you ask us to revive, and your email, when you use the resurrection queue.
• Basic, privacy-friendly usage analytics (Vercel Analytics).

How we use it

• To take payment, fulfil and ship your order, and provide support (contract).
• To send transactional emails — order confirmation, dispatch with tracking, refunds (contract).
• To notify you when a part you requested or voted for is revived, and — only if you opt in — occasional product news (consent; withdraw any time).
• To run and secure the site, and meet our legal and accounting obligations.

Who we share it with

Only the processors that run the service: Supabase (database, authentication, hosting of your data), Stripe (payments), Resend (transactional email), Vercel (hosting/analytics), and Royal Mail (delivery). We never sell your data.

Retention

Order records are kept as long as required for accounting and legal purposes. You can delete your account at any time from your profile — your account and saved details are removed; past order records are retained but unlinked from your identity where the law allows.

Your rights

You can access, correct, export or erase your data, object to or restrict processing, and withdraw consent. Email contact@evocation.store; you also have the right to complain to the UK ICO (ico.org.uk).

Cookies

We use essential cookies to keep you signed in and remember your cart. Analytics are privacy-friendly and do not profile you across sites.